Authentication
Learn how to authenticate with Tabula API
The Tabula API requires authentication with an API key.
API keys
An API key belongs to one Tabula company and acts on that company only. Create a key in Tabula under Einstellungen → API-Einstellungen.
Create a key
Choose a name that tells you later which system uses it, for example
ERP-System. Optionally set an expiration date.
Creating a key requires a Tabula user who may manage the company's users.
Store it securely
Tabula shows the key only once, when you create it, and can't show it again. Store it in a secret manager. If it's lost, revoke it and create a new one.
Send it in the Authorization header
Authorization: Bearer tab_live_…Test the key by inspecting it:
curl https://api.tabula.de/v1/auth/keys/inspect \
-H "Authorization: Bearer $TABULA_API_KEY"The response names the key and the company it acts on. See Inspect the API key.
Keys look like tab_live_…. Send keys only in the header, never in the URL,
and keep them out of browser and mobile apps, where anyone can read them.
Expiration and revocation
- A key without an expiration date never expires.
- A key with an expiration date stops working at the start of that day in the company's timezone.
- Revoke a key under Einstellungen → API-Einstellungen. It stops working immediately.
Requests with a missing, malformed, expired or revoked key fail with 401 and
the invalid_api_key code. See Errors.